1 #include "TestIODeviceMemoryRosetta.h"
2 #include <IOKit/IOService.h>
3 #include <IOKit/IOUserClient.h>
4 #include <IOKit/IOKitServer.h>
5 #include <kern/ipc_kobject.h>
6
7 #if (DEVELOPMENT || DEBUG) && XNU_TARGET_OS_OSX
8
9 OSDefineMetaClassAndStructors(TestIODeviceMemoryRosetta, IOService);
10
11 OSDefineMetaClassAndStructors(TestIODeviceMemoryRosettaUserClient, IOUserClient2022);
12
13 bool
start(IOService * provider)14 TestIODeviceMemoryRosetta::start(IOService * provider)
15 {
16 OSString * str = OSString::withCStringNoCopy("TestIODeviceMemoryRosettaUserClient");
17 bool ret = IOService::start(provider);
18 if (ret && str != NULL) {
19 setProperty(gIOUserClientClassKey, str);
20 registerService();
21 }
22 OSSafeReleaseNULL(str);
23 return ret;
24 }
25
26 bool
start(IOService * provider)27 TestIODeviceMemoryRosettaUserClient::start(IOService * provider)
28 {
29 if (!IOUserClient2022::start(provider)) {
30 return false;
31 }
32 setProperty(kIOUserClientDefaultLockingKey, kOSBooleanTrue);
33 setProperty(kIOUserClientDefaultLockingSetPropertiesKey, kOSBooleanTrue);
34 setProperty(kIOUserClientDefaultLockingSingleThreadExternalMethodKey, kOSBooleanTrue);
35
36 setProperty(kIOUserClientEntitlementsKey, kOSBooleanFalse);
37
38 return true;
39 }
40
41 IOReturn
clientClose()42 TestIODeviceMemoryRosettaUserClient::clientClose()
43 {
44 if (!isInactive()) {
45 terminate();
46 }
47 return kIOReturnSuccess;
48 }
49
50 struct TestIODeviceMemoryRosettaUserClientArgs {
51 uint64_t size;
52 uint64_t offset;
53 uint64_t deviceMemoryOffset;
54 uint64_t length;
55 uint64_t xorkey;
56 };
57
58 struct TestIODeviceMemoryRosettaUserClientOutput {
59 mach_vm_address_t address;
60 mach_vm_size_t size;
61 };
62
63 IOReturn
externalMethodDispatched(IOExternalMethodArguments * args)64 TestIODeviceMemoryRosettaUserClient::externalMethodDispatched(IOExternalMethodArguments * args)
65 {
66 IOReturn ret = kIOReturnError;
67 IOMemoryMap * map = NULL;
68 IODeviceMemory * deviceMemory = NULL;
69 uint64_t * buf;
70
71 TestIODeviceMemoryRosettaUserClientArgs * userClientArgs = (TestIODeviceMemoryRosettaUserClientArgs *)args->structureInput;
72 TestIODeviceMemoryRosettaUserClientOutput * userClientOutput = (TestIODeviceMemoryRosettaUserClientOutput *)args->structureOutput;
73
74 if (userClientArgs->size % sizeof(uint64_t) != 0) {
75 return kIOReturnBadArgument;
76 }
77
78 if (userClientArgs->size + userClientArgs->deviceMemoryOffset > phys_carveout_size) {
79 return kIOReturnBadArgument;
80 }
81
82 // Create memory descriptor using the physical carveout
83 deviceMemory = IODeviceMemory::withRange(phys_carveout_pa + userClientArgs->deviceMemoryOffset, userClientArgs->size);
84 if (!deviceMemory) {
85 printf("Failed to allocate device memory\n");
86 goto finish;
87 }
88
89 // Fill carveout memory with known values, xored with the key
90 buf = (uint64_t *)phys_carveout;
91 for (uint64_t idx = 0; idx < (userClientArgs->deviceMemoryOffset + userClientArgs->size) / sizeof(uint64_t); idx++) {
92 buf[idx] = idx ^ userClientArgs->xorkey;
93 }
94
95 // Map the memory descriptor
96 map = deviceMemory->createMappingInTask(current_task(), 0, kIOMapAnywhere, userClientArgs->offset, userClientArgs->length);
97
98 if (map) {
99 // Release map when task exits
100 userClientOutput->address = map->getAddress();
101 userClientOutput->size = map->getSize();
102 mach_port_name_t name __unused = iokit_make_send_right(current_task(), map, IKOT_IOKIT_OBJECT);
103 ret = kIOReturnSuccess;
104 }
105
106 finish:
107 OSSafeReleaseNULL(map);
108 OSSafeReleaseNULL(deviceMemory);
109 return ret;
110 }
111
112 static IOReturn
TestIODeviceMemoryRosettaMethodDispatched(OSObject * target,void * reference,IOExternalMethodArguments * arguments)113 TestIODeviceMemoryRosettaMethodDispatched(OSObject * target, void * reference, IOExternalMethodArguments * arguments)
114 {
115 TestIODeviceMemoryRosettaUserClient *
116 me = OSRequiredCast(TestIODeviceMemoryRosettaUserClient, target);
117 return me->externalMethodDispatched(arguments);
118 }
119
120 IOReturn
externalMethod(uint32_t selector,IOExternalMethodArgumentsOpaque * args)121 TestIODeviceMemoryRosettaUserClient::externalMethod(uint32_t selector, IOExternalMethodArgumentsOpaque * args)
122 {
123 static const IOExternalMethodDispatch2022 dispatchArray[] = {
124 [0] {
125 .function = &TestIODeviceMemoryRosettaMethodDispatched,
126 .checkScalarInputCount = 0,
127 .checkStructureInputSize = sizeof(TestIODeviceMemoryRosettaUserClientArgs),
128 .checkScalarOutputCount = 0,
129 .checkStructureOutputSize = sizeof(TestIODeviceMemoryRosettaUserClientOutput),
130 .allowAsync = false,
131 .checkEntitlement = "com.apple.iokit.test-check-entitlement",
132 },
133 };
134
135 return dispatchExternalMethod(selector, args, dispatchArray, sizeof(dispatchArray) / sizeof(dispatchArray[0]), this, NULL);
136 }
137
138 #endif /* (DEVELOPMENT || DEBUG) && XNU_TARGET_OS_OSX */
139